CVE-2023-40763
CriticalCVSS 9.8Exploitation Probability (EPSS)
Elevated risk55th percentile - higher than 55% of all known CVEs
Summary
User enumeration is found in PHPJabbers Taxi Booking Script v2.0. This issue occurs during password recovery, where a difference in messages could allow an attacker to determine if the user is valid or not, enabling a brute force attack with valid users.
Risk Assessment
The organization may be exposed to brute force attacks, potentially leading to unauthorized access to user accounts. This increases the risk of data breaches and security violations.
Recommendation
It is recommended to implement consistent messaging during the password recovery process to minimize the risk of user enumeration. Additionally, consider implementing mechanisms to protect against brute force attacks.
Original NVD description (English source)
User enumeration is found in PHPJabbers Taxi Booking Script v2.0. This issue occurs during password recovery, where a difference in messages could allow an attacker to determine if the user is valid or not, enabling a brute force attack with valid users.